www.pudn.com > bayes.rar > b.dom

/*---------------------------------------------------------------------- 
  domains 
----------------------------------------------------------------------*/ 
dom(1) = ZZ [0, 57715]; 
dom(2) = { udp, tcp, icmp }; 
dom(3) = { private, domain_u, http, smtp, ftp_data, ftp, eco_i, other, auth, ecr_i, IRC, X11, finger, time, domain, telnet, pop_3, ldap, login, name, ntp_u, http_443, sunrpc, printer, systat, tim_i, netstat, remote_job, link, urp_i, sql_net, bgp, pop_2, tftp_u, uucp, imap4, pm_dump, nnsp, courier, daytime, iso_tsap, echo, discard, ssh, whois, mtp, gopher, rje, ctf, supdup, hostnames, csnet_ns, uucp_path, nntp, netbios_ns, netbios_dgm, netbios_ssn, vmnet, Z39_50, exec, shell, efs, klogin, kshell, icmp }; 
dom(4) = { SF, RSTR, S1, REJ, S3, RSTO, S0, S2, RSTOS0, SH, OTH }; 
dom(5) = ZZ [0, 62825648]; 
dom(6) = ZZ [0, 5203179]; 
dom(7) = ZZ [0, 1]; 
dom(8) = ZZ [0, 3]; 
dom(9) = ZZ [0, 3]; 
dom(10) = ZZ [0, 101]; 
dom(11) = ZZ [0, 4]; 
dom(12) = ZZ [0, 1]; 
dom(13) = ZZ [0, 796]; 
dom(14) = ZZ [0, 1]; 
dom(15) = ZZ [0, 2]; 
dom(16) = ZZ [0, 878]; 
dom(17) = ZZ [0, 100]; 
dom(18) = ZZ [0, 5]; 
dom(19) = ZZ [0, 4]; 
dom(20) = ZZ [0, 0]; 
dom(21) = ZZ [0, 1]; 
dom(22) = ZZ [0, 1]; 
dom(23) = ZZ [0, 511]; 
dom(24) = ZZ [0, 511]; 
dom(25) = IR [0, 1]; 
dom(26) = IR [0, 1]; 
dom(27) = IR [0, 1]; 
dom(28) = IR [0, 1]; 
dom(29) = IR [0, 1]; 
dom(30) = IR [0, 1]; 
dom(31) = IR [0, 1]; 
dom(32) = ZZ [0, 255]; 
dom(33) = ZZ [0, 255]; 
dom(34) = IR [0, 1]; 
dom(35) = IR [0, 1]; 
dom(36) = IR [0, 1]; 
dom(37) = IR [0, 1]; 
dom(38) = IR [0, 1]; 
dom(39) = IR [0, 1]; 
dom(40) = IR [0, 1]; 
dom(41) = IR [0, 1]; 
dom(intrusion_type) = { normal., snmpgetattack., named., xlock., smurf., ipsweep., multihop., xsnoop., sendmail., guess_passwd., saint., buffer_overflow., portsweep., pod., apache2., phf., udpstorm., warezmaster., perl., satan., xterm., mscan., processtable., ps., nmap., rootkit., neptune., loadmodule., imap., back., httptunnel., worm., mailbomb., ftp_write., teardrop., land., sqlattack., snmpguess. };